X-Git-Url: https://git.rrq.au/?a=blobdiff_plain;f=manager%2Fbasic_login.lsp;h=f491a9eee47ead9952defe603dd782c9f6792e76;hb=4466d2ec250322c1b603d041703259586e213b22;hp=14117d45eb3856dfa90346aa0d34a90cccd349ff;hpb=cb0bad5aa28b439d25f978173798a4c17e91bdb8;p=rrq%2Fhourglass.git diff --git a/manager/basic_login.lsp b/manager/basic_login.lsp index 14117d4..f491a9e 100644 --- a/manager/basic_login.lsp +++ b/manager/basic_login.lsp @@ -8,6 +8,7 @@ ;; name to determine th actual script. That lookup will also use the ;; "role base" as declared in "roles.txt" +(write-line 2 (string (date-value) " " (main-args))) (unless (ends-with (main-args 0) ".cgi") (if (exists file? (list (main-args 1) (string (main-args 1) ".lsp"))) @@ -15,12 +16,13 @@ (write-line 2 (string "Unknown command " (main-args 1)))) (exit 0)) + ;; This script is executed in (protected) subdirectory www (change-dir "..") ;; Needs an HTTP_AUTHORIZATION environment variable -(unless (setf AUTH (env "HTTP_AUTHORIZATION")) - (write-line 2 (read-file "tmpl/unauthorized.http")) +(when (empty? (setf AUTH (env "HTTP_AUTHORIZATION"))) + (write-line 1 (read-file "tmpl/unauthorized.http")) (exit 0)) ;; Must find that value in .htpasswd @@ -28,11 +30,14 @@ (write-line 1 (read-file "tmpl/unauthorized.http")) (exit 0)) +;; Determine actual script name respecting given role, if any. +(define (role-script (ROLE ".")) + (let ((CMD (and (regex "([^/]*).cgi$" (main-args 0) 0) $1))) + (if (= "." ROLE) (string CMD ".lsp") (format "%s/%s.lsp" ROLE CMD)))) + (setf - ROLES (map (fn (x) (parse x ":")) (parse (read-file "roles.txt") "\n")) REMOTE_USER (and (regex "([^:]+):" (base64-dec (6 AUTH)) 0) $1) - ROLE (or (lookup REMOTE_USER ROLSE) "child") - SCRIPT (format "%s/%s" ROLE (main-args 1)) + SCRIPT (role-script) ) (env "REMOTE_USER" REMOTE_USER) (env "ROLE" ROLE)